Ingeniería Social: Revisión Sistemática de Phishing y Pretexting en Plataformas Académicas

• Ana Camacho Coronel ^[1] ; José Miguel Erazo Ayón ^[1] ; César Salazar Tova ^[1] ; Brennero Pardo Centanaro ^[1]
  1. [1] Universidad Católica de Santiago de Guayaquil

     Universidad Católica de Santiago de Guayaquil

     Guayaquil, Ecuador

     
• Localización: RISTI: Revista Ibérica de Sistemas e Tecnologias de Informação, ISSN-e 1646-9895, Nº. Extra 72, 2024, págs. 122-136
• Idioma: español
• Títulos paralelos:
  • Social Engineering Prevention: A Systematic Review of Phishing and Pretexting for Application in an Academic Environment
• Enlaces
  • Texto completo (pdf)
• Resumen
  • español

    Este estudio presenta una revisión sistemática sobre las técnicas de ingeniería social, específicamente phishing y pretexting, aplicadas en plataformas académicas y redes sociales. Se analizaron métodos preventivos para uso de docentes y estudiantes de la Universidad Católica de Santiago de Guayaquil, identificando buenas prácticas de seguridad de la información. La revisión abarca artículos desde 2017 hasta 2024, destacando la necesidad de educación y capacitación para mitigar estos ciberataques.

  • English

    This study presents a systematic review of social engineering techniques, specifically phishing and pretexting, applied to academic platforms and social networks. Preventive methods were analyzed for use by teachers and students at the Catholic University of Santiago de Guayaquil, identifying good information security practices. The review covers articles from 2017 to 2024, highlighting the need for education and training to mitigate these cyberattacks.

• Referencias bibliográficas
  • Acosta Pineda, S., Bohada, J. A. & Pineda, M. L. (2018, 28 noviembre). Ingeniería social en Instituciones de Educación Superior. Revista...
  • Alghenaim, M. F., Bakar, N. A. A., Yusoff, R. C. M., Hassan, N. H., & Sallehudin, H. (2021, July). Employee Awareness Model to Enhance...
  • AL-Otaibi, A. F., & Alsuwat, E. S. (2020). A study on social engineering attacks: phishing attack. International Journal of Recent Advances...
  • Arnold, D., Blackmon, B., Gibson, B., Moncivais, A. G., Powell, G. B., Skeen, M., . . . Wade, N. B. (2022). The emotional impact of multi-factor...
  • Arora, A., Garg, H., & Shivani, S. (2022). Anti-phishing technique based on dynamic image captcha using multi secret sharing scheme. Journal...
  • Atwell, C., Blasi, T., & Hayajneh, T. (2016, April). Reverse TCP and social engineering attacks in the era of big data. In 2016 IEEE 2nd...
  • Borkovich, D. J., & Skovira, R. J. (2019). Cybersecurity inertia and Social Engineering: ¿Who’s worse, employees or hackers? Issues in...
  • Bou Sleiman, M., & Gerdemann, S. (2021). Covid-19: a catalyst for cybercrime?. International Cybersecurity Law Review, 2(1), 37-45. doi:10.1365/s43439-021-00024-9
  • Britvina, V. V., Musatova, D. A., Altoukhov, A. V., Zueva, A. S., & Sorokin, A. Y. (2021, August). Artificial intelligence as an instrument...
  • Butt, U. A., Amin, R., Aldabbas, H., Mohan, S., Alouffi, B., & Ahmadian, A. (2022). Cloud-based email phishing attack using machine and...
  • Canfield, C. I., Fischhoff, B., & Davis, A. (2019). Better beware: comparing metacognition for phishing and legitimate emails. Metacognition...
  • Conteh, N. Y., & Sword, D. (2021). The dynamics of social engineering and cybercrime in the digital age. In Ethical hacking techniques...
  • De Ramos, N. M., & Esponilla, F. D., II. (2022). Cybersecurity program for Philippine higher education institutions: A multiple-case study....
  • Dutta, A. K., Meyyappan, T., Qureshi, B., Alsanea, M., Abulfaraj, A. W., Al Faraj, M. M., & Sait, A. R. W. (2023). Optimal deep belief...
  • Edwards, M., Larson, R., Green, B., Rashid, A., & Baron, A. (2017). Panning for gold: Automatically analysing online social engineering...
  • Frumento, E., Freschi, F., Andreoletti, D., & Consoli, A. (2017, August). Victim Communication Stack (VCS) A flexible model to select...
  • Ghafir, I., Saleem, J., Hammoudeh, M., Faour, H., Prenosil, V., Jaf, S., ... & Baker, T. (2018). Security threats to critical infrastructure:...
  • Greavu-Şerban, V., & Constantin, F. (2022). Aspects of Social Engineering and Its Modalities to Countercharge and Prevent It.
  • J. M. Briones, M. A. Coronel and P. Chavez-Burbano, “Case of study: Identity theft in a university WLAN Evil twin and cloned authentication...
  • Khader, M., Karam, M., & Fares, H. (2021). Cybersecurity Awareness Framework for Academia. Information, 12(10), 417.
  • Klimburg-Witjes, N., & Wentland, A. (2021). Hacking humans? Social Engineering and the construction of the “deficient user” in cybersecurity...
  • Lam, T., & Kettani, H. (2019, April). PhAttApp: A phishing attack detection application. In Proceedings of the 2019 3rd International...
  • Marchand-Niño, W. -., & Samaniego, H. H. (2021). Information security culture model. A case study. Paper presented at the Proceedings...
  • Montañez, R., Golob, E., & Xu, S. (2020). Human cognition through the lens of social engineering cyberattacks. Frontiers in Psychology,...
  • Mouton, F., Leenen, L., & Venter, H. S. (2016). Social engineering attack examples, templates and scenarios. Computers & Security,...
  • Ngambeki, I., Ahluwalia, G., Ansari, S., Li, M., & Arul, G. L. R. (2021). Developing a social-engineering course. Paper presented at the...
  • Nigam, A., Pasricha, R., Singh, T., & Churi, P. (2021). A systematic review on AI-based proctoring systems: Past, present and future....
  • Ojugo, A. A., & Otakore, O. D. (2018). Mitigating social engineering menace in Nigerian Universities. J. of Comp. Sci. & Application,...
  • Parthy, P. P., & Rajendran, G. (2019, October). Identification and prevention of social engineering attacks on an enterprise. In 2019...
  • Proaño-Escalante, Rodrigo Arturo, & Gavilanes-Molina, Andrés Fernando. (2018). Estrategia para responder a incidentes de inseguridad informática...
  • RISTI - Revista Ibérica de Sistemas e Tecnologias de Informação, (53), 69-87. https://doi: 10.17013/risti.53.69–87
  • RISTI - Revista Ibérica de Sistemas e Tecnologias de Informação, (32), 17-32. https://doi: 10.17013/risti.32.17–32
  • Roy, S., Sharmin, N., Acosta, J. C., Kiekintveld, C., & Laszka, A. (2022). Survey and Taxonomy of Adversarial Reconnaissance Techniques....
  • S. Gupta, A. Singhal and A. Kapoor, “A literature survey on social engineering attacks: Phishing attack,” 2016 International Conference on...
  • Salahdine, F., & Kaabouch, N. (2019). Social engineering attacks: A survey. Future Internet, 11(4).
  • Salahdine, F., El Mrabet, Z., & Kaabouch, N. (2021). Phishing attacks detection A machine learning-based approach. Paper presented at...
  • Steinmetz, K. F. (2021). The Identification of a model victim for social engineering: A qualitative analysis. Victims & Offenders, 16(4),...
  • Stozhko, K. P., Stozhko, D. K., Shilovtsev, A. V., Nekrasov, S. N., & Makarova, T. N. (2022). The role of social engineering in modern...
  • Sumner, A., & Yuan, X. (2019, April). Mitigating phishing attacks: an overview. In Proceedings of the 2019 ACM Southeast Conference (pp....
  • Swarnalatha, K. S., Ramchandra, K. C., Ansari, K., Ojha, L., & Sharma, S. S. (2021). Real-time threat intelligence-block phishing attacks....
  • Trumbach, C. C., Payne, D. M., & Walsh, K. (2022). Cybersecurity in business education: The ‘how to’ in incorporating education into practice....
  • Tsai, C. -., Shih, W. -., Hsieh, F. -., Chen, Y. -., Lin, C. -., & Wu, H. -. (2022). Using the ARCS model to improve undergraduates’ perceived...
  • Walker-Roberts, S., Hammoudeh, M., Aldabbas, O., Aydin, M., & Dehghantanha, A. (2020). Threats on the horizon: Understanding security...
  • Wilson, B. (2018). Introducing cyber security by designing mock social engineering attacks. Journal of Computing Sciences in Colleges, 34(1),...
  • Younis, Y. A., & Musbah, M. (2020, September). A framework to protect against phishing attacks. In Proceedings of the 6th International...
  • Zolotarev, V., Zolotareva, E., & Mawla, V. (2022). Phishing Attacks Digital Trace Analysis for Security Awareness.